Efficient Phase-Encoding Quantum Key Generation with Narrow-Band Single Photons 
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We propose an efficient phase-encoding quantum secret key generation scheme with heralded 
narrow-band single photons. The key information is carried by the phase modulation directly on the 
single-photon temporal waveform. We show that, when the technique is applied to the conventional 
single photon phase-encoding BB84 and differential phase shift (DPS) quantum key distribution 
schemes, the key generation efficiencies can be improved by a factor of 2 and 3, respectively. For 
N(> 3)-period DPS systems, the key generation efficiency can be improved by a factor of N. The 
technique is suitable for quantum-memory-based long-distance fiber communication system. 
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Quantum key distribution (QKD) is an uncondition- 
ally secure method to distribute secret keys between two 
parties (Alice and Bob). The security of QKD is guar- 
anteed by the principles of quantum mechanics 0, 0, 
such as noncloning theorem and Heisenberg uncertainty. 
Since the first QKD experiment using a 32cm free-space 
transmission line was reported in 19920, the key dis- 
tribution distance has continued to increase. With the 
fiber-based decoy-state BB84 protocol, a photon number 
splitting(PNS) secure key distribution over 200km has 
been achieved Q. With the differential phase shift(DPS) 
QKD scheme, the PNS-secure key distribution distance 
record is also 200km [f|. The attenuated laser is worked 
as the source in the above schemes. In order to in- 
crease the key distribution distance, quantum memory 
and quantum repeater are proposed and demonstrated 
recently @. And hence, single photon especially narrow- 
band single photon is regarded as an attractive source for 
long distance QKD again besides the attenuated laser [7|. 
With single photons, phase-encoding BB84 (PE-BB84) 
[K and the DPS-QKD [9MTT| are two typical schemes: 
Alice divides the single photon into two or more time 
slots and Bob detects the single photon using an unbal- 
anced Mach-Zehnder (M-Z) interferometer, respectively. 
Because the sequenced single-photon pulses experience 
the same phase and polarization changes durin g pr opa- 
gation through the fiber transmission linef^, [Tol Il2j. the 
bit error can be easily corrected at the receiver. However, 
due to lack of generating single photons with controllable 
(phase-amplitude) waveforms, in the conventional single 
photon PE-BB84 and DPS-QKD schemes, a single pho- 
ton is splitted into paths with different lengthes and then 
recombined with passive beam splitters that introduce 
unavoidable loss. As a result, the generation efficiency 
decreases as the number of time slot increases. In order 
to increase the generation efficiency, many methods have 
been proposed, such as using optical switches or polar- 
ization beam splitter (l3|. 

In this paper, we propose another phase-encoding gen- 
eration method to improve the key creation efficiency in 
the PE-BB84 and DPS-QKD schemes without using M- 
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FIG. 1: (a) the conventional phase-encoding BB84 scheme; 
(b) our proposed phase-encoding BB84 scheme with heralded 
narrow bandwidth square wave single photons; s.: Stokes; 
a.s.: anti-Stokes; PM: phase modulator; BS, BS1, BS2: 50% 
beam splitter; M, Ml, M2: mirror; D, Dl, D2: single-photon 
detector. 



Z interferometer on Alice's site. The motivation comes 
from the recent narrow-band nonclassical paired photon 
generation [l4T[r7l |. Using spontaneous four- wave mix- 
ing and electromagnetically induced transparency in cold 
atoms, subnatural linewidth biphoton with a coherence 
time up to about 1 /is has been demonstrated [l8T | . Du et 
al. proposed and demonstrated shaping biphoton tempo- 
ral waveforms by periodically modulating the two classi- 
cal driven fields With such a long coherence time 
and under detecting one of the paired photons, heralded 
single photons with arbitrary phase-amplitude waveform 
can be generated with external light modulators [2(], [H[ . 
It is then possible to eliminate the need of beam split- 
ters in the conventional phase-encoding schemes by using 
directly phase modulated heralded narrow-band single 
photons. 
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FIG. 2: Time squences of the phase modulated square wave 
single photon of the proposed phase-encoding BB84 scheme, 
the ratio of the click probabilty in the three time squences 
is (a) : (6) : (c) = 1 : 2 : 1. T is the phase modulated 
period(Here we suppose T — 100 ns). 




FIG. 3: (a) the currently implemented DPS-QKD scheme; 
(b) our proposed DPS-QKD scheme with heralded narrow 
bandwidth square wave single photons; s.: Stokes; a.s.: anti- 
Stokes; PM: phase modulator; BS, BS1, BS2: 50% beam split- 
ter; M, Ml, M2: mirror; D, Dl, D2: single-photon detector. 



We first consider the PE-BB84 scheme and improve 
its key generation efficiency. Figure HI a) shows the con- 
ventional setup. On Alice's site, a single photon is di- 
vided into one short path and one long path with phase 
modulation (PM) and a time delay of T after the first 
beam splitter (50%), and then is recombined at the sec- 
ond beam splitter (50%). This effectively splits the sin- 
gle photon as a superposition of two time slots separated 
by time T. The phase difference between these two time 
slots is modulated by one of the two nonorthogonal ba- 
sis {0,7r} and {tt/2,3tt/2} randomly. Bob measures the 
phase difference with two detectors either in the {0, tt} 
or the {7r/2, 37r/2} basis, using a phase modulator in the 
long path of an unbalanced M-Z interferometer whose 
path difference equals to that on Alice's site. It is clear 
that the single photon at Alice's site has 50% probabil- 
ity leaking out of the system and thus the maximum key 
sending efficiency is 1/2. On Bob's site, there is no pho- 
ton loss through the beam splitters. To maximize the use 
efficiency of the single-photon source, we better avoid the 
beam splitters on Alice's site. Our proposed scheme is 
shown in Fig. [ljb) where Alice's site is modified. In our 
scheme, with the technique described in [20j,l2l| and feed- 
back waveform control, Alice makes use of narrow-band 
biphotons to generate heralded single anti- Stokes photon 
with a rectangular shape with a temporal length of 2T 
(for example, T=100 ns). This rectangular-shaped single 
photon then passes through a PM trigged by detection 
of the Stokes photon and the phase difference is encoded 
to the two time slots. The detection at Bob's site is sim- 
ilar to that in the conventional scheme [Fig. [2(a)] except 
the trigger timing of detecting the Stokes photon is sent 
from Alice through a classical channel. In this way, there 
is no photon loss on Alice's site and the key generation 
efficiency is increased by a factor of 2. Bob could detect 
one photon at the three time instances with the ratio 



1 : 2 : 1 as illustrated in Figf2J (a) the first period of the 
photon passes the short path of the M-Z interferometer; 

(b) the first period of the photon passes the long path and 
the second period of the photon passes the short path of 
the M-Z interferometer; (c)the second period of the pho- 
ton passes the long path of the M-Z interferometer. In 
the time instance (b), the phase difference between the 
two consecutive periods will determine the outputs of the 
M-Z interferometer and then the click of which detector. 
When Bob detects a photon at the time instances (a) and 

(c) , he will discard data. When Bob detects a photon at 
the time instance (b) , a secret key bit can be created by 
comparing his basis with Alice's, similar to the proto- 
col in polarization-based BB84 Q. Because Bob has 1/2 
probability in measuring the phase difference and another 
1/2 probability in matching the basis, the receiving-key 
efficiency is 1/4. Therefore accounting the sending effi- 
ciency on Alice's side, the total key creation efficiency 
is 1/8 for the conventional PE-BB84 scheme, and 1/4 
for the improved scheme. The security of the PE-BB84 
scheme has been analyzed a lot in the past and proven 
to be unconditionally secure 0, [22| . 

Now we turn to the DPS-QKD scheme that has 
been demonstrated to be one of the most applicable 
schemes Q. Here we show that with a phase modulated 
long single photon from a biphoton source, the key cre- 
ation efficiency of the DPS-QKD scheme could also be 
improved significantly. Figure [Ha) shows the setup of 
the conventional DPS-QKD scheme @. On Alice's site, 
the photon from a single photon source is divided into 
three paths with time separation T and then recombined 
by beam splitters. The keys are encoded by preparing the 
relative phase shift between two consecutive pulses in 
or 7T randomly. Bob measures the phase difference us- 
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FIG. 4: Time squences of the phase modulated square wave 
photon of our proposed DPS-QKD scheme, the ratio of the 
click probabilty in the four time squences is (a) : (b) : (c) : 
(d) = 1:2:2:1. T is the phase modulated period(Here we 
suppose T = 100 ns). 
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FIG. 5: The key creation efficiency with different N 
for our proposed scheme and the conventional DPS-QKD 
scheme(with passive BS). 



ing an unbalanced M-Z interferometer setup with a path 
difference that compensates the time delay T. Similar to 
that in PE-BB84, the sending efficiency of a DPS pho- 
ton is only 1/3 due to the loss of beam splitters. Such a 
loss can be eliminated in our improved scheme without 
using beam splitters on Alice's site, as shown in Figj3jb) . 
Similar to the improved PE-BB84 system, we divide the 
long rectangular-shape photon with a temporal length 
3T into 3 time sequences with equal period T. As one 
does not know the exactly arriving time of the single 
photon within the three time slots, the heralded single 
photon can be described as a superposition of |l a 0f,0 c ), 
|0 a lft0 c ), and |0 a 0bl c ) (where "l a " represents the pho- 
ton at time slot a, otherwise it is "0 a "). Because the 
phase of each time slot is randomly modulated by or n, 
the photon sent from Alice to Bob is in one of the four 
states: l/v / 3(|la0 6 c )±|0 a l h c )±|0 Q h lc)) in the present 
scheme. These four states, which are nonorthogonal with 
each other and thus cannot be identified by a single mea- 
surement, have the same mathematica forms as those in 
the conventional DPS-QKD scheme [lT|. Therefore, 
the unconditional security of the proposed scheme can 
be proved following the procedure in Ref. The de- 

tection setup on Bob's site is similar to that in the con- 
ventional scheme with the trigger timing sent from Alice 
through a classical channel by detecting the Stokes pho- 
tons. It is clear that the single-photon sending efficiency 
becomes unity in this case and the encoding machine is 
lossless. In the DPS-QKD configuration, Bob detects 
a photon at four possible time instances with the ratio 
1 : 2 : 2 : 1 as illustrated in Fig. SJ (a) the photon in 
the first period passes the short path of the M-Z inter- 
ferometer; (b) the photon in the first period passes the 
long path and the photon in the second period passes the 
short path; (c) the photon in the second period passes the 
long path and the photon in the third period passes the 



short path; (d)the photon in the third period passes the 
long path. In the time instances (b) and (c), the phase 
difference between the proper consecutive periods will de- 
termine the outputs of the M-Z interferometer and then 
the click of which detector. Bob discards the photons 
detected at the time instances (a) and (d), and commu- 
nicate with Alice the time instance when he get a photon 
click only at (b) or (c) 9]. With her own modulation 
pattern, Alice knows which detector clicked on Bob's site 
and key bits are created and shared by the twoparties. 
The details of the protocol can be seen in Ref. [9| . Here 
we focus on the key creation efficiency. On Bob's site, 
photons counted at the time instances (b) and (c) fully 
contribute to the key. The probability for these events is 
2/3. Thus, taking into account the sending efficiency on 
Alice's site, the entire key creation efficiency is 2/9 for 
the conventional beam-splitter-based DPS-QKD scheme, 
and 2/3 for our improved scheme. Another feature that 
should be mentioned is the information capacity after 
error correction. As described above, the efficiency to 
obtain sifted keys in our scheme is 3 times that in the 
conventional DPS-QKD scheme, while the error rate in- 
troduced by the simple intercept/resend attack is 1/4, 
which is the same as the other scheme. Thus, the new 
scheme has the larger final information capacity when 
other parameters hold the same. 

As proposed by Inoue et al. [t| Hj|, the above DPS- 
QKD scheme with N=3 time slots can be extended to 
N(>3) cases where the key receiving efficiency scales as 
(N-l)/N and approaches 1 at large N limit. However, in 
the conventional setup with passive beam splitters on Al- 
ice's site, the single-photon sending efficiency decreases 
at a larger N because it scales as 1/N. As a result, the 
total key creation efficiency becomes (N-l)/N 2 and de- 
creases to zero at the limit of large N. If we use heralded 
narrow-band single photons with proper phase-amplitude 



4 



modulations, the sending efficiency on Alice's site is al- 
ways 1 and does not depend on N. Thus, in our proposed 
technique, the total key creation efficiency is proportional 
to (N-l)/N and indeed reaches unity at large N limit. 
Figure [5] shows the difference of the total creation effi- 
ciencies as functions of N between the proposed and the 
conventional DPS-QKD schemes as a comparison. 

In addition, besides the key creation effeciency, the se- 
cure key rate(SKR) is another important parameter to 
characterize a practical QKD system. Comparing with 
the conventional single photon schemes, there are sev- 
eral more parameters which will limit the SKR in our 
scheme: Firstly, the generation rate and the temporal 
length of the heralded single photon; with 300ns tem- 
poral length photons, the SKR will be limited to about 
3MHz; using faster phase modulator(> 30 GHz) allows us 
to reduce the temporal length from 300ns to several ns or 
even shorter 24| ; the generation rate can be increased if 
we short the temporal length of the single photon[20j, or 
using spontaneous parametric down-conversion heralded 
single photon source. Secondly, the time jitter of the de- 
tector, with the time jitter of lOOps, the detector will 
bring a error rate of 1% if T=10ns. Thirdly, the shape 
of the square wave single photon after a long distance 
transmission, especially the rising and falling edges, this 
shortage can be conquered if we let the temporal length 
of the single-photon a little longer than NT(the effective 
signal length); the propagation losses in the optical fiber 
cables is bigger for the 780nm narrow-band single pho- 
tons as we proposed; fortunately, the generation of tele- 
com wavelengths narrow-band photons has already been 
demonstrated in experiment |25j. 

In summary, we have proposed a high efficient phase- 
encoding quantum key generation scheme by using her- 



alded narrow-band single photons with phase modula- 
tion. While implemented to the single photon PE-BB84 
protocol, the entire key creation efficiency can be in- 
creased by a factor of 2. For the single photon DPS- 
QKD scheme with N=3, the key creation efficiency can 
be increased by a factor of 3. We further show that in 
the conventional single photon scheme the entire key cre- 
ation efficiency decreases as we increase N and reaches 
zero at large N limit due to the beam splitter loss on 
Alice's site. In our proposed technique, the creation ef- 
ficiency scales as (N-l)/N and reaches unity at large N. 
The overall maximum efficiency may be only limited by 
shaping loss of the initial temporal waveform of heralded 
single photons emitted from their source, the quantum 
detection efficiencies, and propagation loss. The nearly 
rectangular-shaped subnatural linewidth biphotons [181 ] 
are ideal for this application with a reshaping loss less 
than 20%. In addition, the narrow band photons can be 
directly integrated with the quantum memory and quan- 
tum repeater, so the described technique will be suitable 
for quantum-memory-based long-distance fiber transmis- 
sion systems. 
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